General

  • Target

    HDFC_Copy.zip

  • Size

    2.1MB

  • MD5

    d815f131ec754c4e872358a0fc8f175a

  • SHA1

    3d8298dda7cee2d318926cdce1f153bb704c26e4

  • SHA256

    8077016cb0e6290e1132887f46763062fead26b3b8ad1ae845511d0e65670181

  • SHA512

    e27db2e829597af7b3d9786e754902b98b0914ee8c93cbe3709a781ffe8410d22e1b5ebddbadca1581c3edacc3f36bb130f5cfb8041cdd88fa110441212c4df4

  • SSDEEP

    49152:TxWDH+p96uNE4CAxWNb/NWUFouXoIjjac3mb/+m8VG:FAH+aSxWNbl3o2V3mb/+m8c

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HDFC_Copy.zip
    .zip
  • HDFC_Copy.bat
    .exe windows x86

    6f118d6a4f3aa7a4073eb11679e3ad87


    Headers

    Imports

    Sections